| Vulnerability Name: | CVE-2006-3462 (CCN-28153) | ||||||||||||||||||||||||
| Assigned: | 2006-08-01 | ||||||||||||||||||||||||
| Published: | 2006-08-01 | ||||||||||||||||||||||||
| Updated: | 2017-10-11 | ||||||||||||||||||||||||
| Summary: | Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images. | ||||||||||||||||||||||||
| CVSS v3 Severity: | 5.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||||||||||||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P) 5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
3.8 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||||||||||||||||||
| Vulnerability Type: | CWE-119 | ||||||||||||||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||||||||||||||
| References: | Source: SGI Type: UNKNOWN 20060801-01-P Source: SGI Type: UNKNOWN 20060901-01-P Source: CCN Type: BugTraq Mailing List, Tue Aug 01 2006 - 17:40:12 CDT rPSA-2006-0142-1 libtiff Source: MITRE Type: CNA CVE-2006-3462 Source: CCN Type: Apple Security Update 2006-004 About Security Update 2006-004 Source: MISC Type: UNKNOWN http://docs.info.apple.com/article.html?artnum=304063 Source: CCN Type: Apple Security Update 2006-004 for Mac Pro About Security Update 2006-004 for Mac Pro Source: CCN Type: Apple Web site About the security content of iPhone v1.1.2 and iPod Touch v1.1.2 Updates Source: APPLE Type: UNKNOWN APPLE-SA-2006-08-01 Source: TRUSTIX Type: UNKNOWN 2006-0044 Source: CCN Type: RHSA-2006-0603 libtiff security update Source: CCN Type: RHSA-2006-0648 kdegraphics security update Source: CCN Type: SA21253 Mac OS X Security Update Fixes Multiple Vulnerabilities Source: SECUNIA Type: Vendor Advisory 21253 Source: SECUNIA Type: Vendor Advisory 21274 Source: SECUNIA Type: Vendor Advisory 21290 Source: CCN Type: SA21304 libTIFF Multiple Vulnerabilities Source: SECUNIA Type: Vendor Advisory 21304 Source: SECUNIA Type: Vendor Advisory 21319 Source: SECUNIA Type: Vendor Advisory 21334 Source: SECUNIA Type: Vendor Advisory 21338 Source: SECUNIA Type: Vendor Advisory 21346 Source: SECUNIA Type: Vendor Advisory 21370 Source: SECUNIA Type: Vendor Advisory 21392 Source: CCN Type: SA21501 Avaya Products libTIFF Multiple Vulnerabilities Source: SECUNIA Type: Vendor Advisory 21501 Source: SECUNIA Type: Vendor Advisory 21537 Source: SECUNIA Type: Vendor Advisory 21598 Source: SECUNIA Type: Vendor Advisory 21632 Source: SECUNIA Type: Vendor Advisory 22036 Source: CCN Type: SA27181 Sun Solaris libtiff Multiple Vulnerabilities Source: SECUNIA Type: Vendor Advisory 27181 Source: CCN Type: SA27222 Sun Solaris libtiff Multiple Vulnerabilities Source: SECUNIA Type: Vendor Advisory 27222 Source: CCN Type: SA27832 Sun Solaris libTIFF Multiple Vulnerabilities Source: SECUNIA Type: Vendor Advisory 27832 Source: CCN Type: SECTRACK ID: 1016628 LibTIFF Multiple Bugs Let Remote Users Execute Arbitrary Code Source: SECTRACK Type: UNKNOWN 1016628 Source: CCN Type: SECTRACK ID: 1016671 (Apple Issues Fix for Mac Pro) LibTIFF Multiple Bugs Let Remote Users Execute Arbitrary Code Source: SECTRACK Type: UNKNOWN 1016671 Source: SLACKWARE Type: UNKNOWN SSA:2006-230 Source: CCN Type: Sun Alert ID: 103099 Multiple Security Vulnerabilities in the Solaris Tag Image File Format Library libtiff(3) Source: CCN Type: Sun Alert ID: 103160 Security Vulnerabilities in libtiff(3) May Allow Denial of Service (DoS) or Privilege Elevation Source: SUNALERT Type: UNKNOWN 103160 Source: SUNALERT Type: UNKNOWN 201331 Source: CONFIRM Type: UNKNOWN http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm Source: CCN Type: ASA-2006-166 libtiff security update (RHSA-2006-0603) Source: CCN Type: ASA-2006-207 kdegraphics security update (RHSA-2006-0648) Source: CCN Type: ASA-2007-440 Multiple Security Vulnerabilities in the Solaris Tag Image File Format Library libtiff(3) (Sun 103099) Source: CCN Type: ASA-2007-509 Security Vulnerabilities in libtiff(3) May Allow Denial of Service (DoS) or Privilege Elevation (Sun 103160) Source: DEBIAN Type: Patch, Vendor Advisory DSA-1137 Source: DEBIAN Type: DSA 1137-1 tiff -- several vulnerabilities Source: DEBIAN Type: DSA-1137 tiff -- several vulnerabilities Source: CCN Type: GLSA-200608-07 libTIFF: Multiple vulnerabilities Source: GENTOO Type: UNKNOWN GLSA-200608-07 Source: MANDRIVA Type: UNKNOWN MDKSA-2006:136 Source: MANDRIVA Type: UNKNOWN MDKSA-2006:137 Source: SUSE Type: UNKNOWN SUSE-SA:2006:044 Source: OSVDB Type: UNKNOWN 27726 Source: CCN Type: OSVDB ID: 27726 LibTIFF NeXT RLE Decoder Image Handling Overflow Source: REDHAT Type: Vendor Advisory RHSA-2006:0603 Source: REDHAT Type: Vendor Advisory RHSA-2006:0648 Source: CCN Type: LibTIFF Web page LibTIFF - TIFF Library and Utilities Source: BID Type: UNKNOWN 19282 Source: CCN Type: BID-19282 LibTIFF Next RLE Decoder Remote Heap Buffer Overflow Vulnerability Source: BID Type: UNKNOWN 19289 Source: CCN Type: BID-19289 Apple Mac OS X Multiple Security Vulnerabilities Source: CCN Type: USN-330-1 tiff vulnerabilities Source: UBUNTU Type: UNKNOWN USN-330-1 Source: CERT Type: US Government Resource TA06-214A Source: VUPEN Type: Vendor Advisory ADV-2006-3101 Source: VUPEN Type: Vendor Advisory ADV-2006-3105 Source: VUPEN Type: Vendor Advisory ADV-2007-3486 Source: VUPEN Type: Vendor Advisory ADV-2007-4034 Source: XF Type: UNKNOWN libtiff-rle-decoder-bo(28153) Source: CONFIRM Type: UNKNOWN https://issues.rpath.com/browse/RPL-558 Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:11301 Source: SUSE Type: SUSE-SA:2006:044 Libtiff integer overflows | ||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration RedHat 1: Configuration RedHat 2: Configuration RedHat 3: Configuration RedHat 4: Configuration RedHat 5:  Denotes that component is vulnerable | ||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||
| |||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||